|
|
|
@ -1,4 +1,9 @@
|
|
|
|
|
---
|
|
|
|
|
- name: "Create {{ evobsd_internal_group }} group"
|
|
|
|
|
group:
|
|
|
|
|
name: "{{ evobsd_internal_group }}"
|
|
|
|
|
system: true
|
|
|
|
|
|
|
|
|
|
- name: "Create {{ evobsd_ssh_group }} group"
|
|
|
|
|
group:
|
|
|
|
|
name: "{{ evobsd_ssh_group }}"
|
|
|
|
@ -69,7 +74,7 @@
|
|
|
|
|
block: |
|
|
|
|
|
Match Address {{ evolix_trusted_ips | join(',') }}
|
|
|
|
|
PasswordAuthentication yes
|
|
|
|
|
Match Group {{ evobsd_ssh_group }}
|
|
|
|
|
Match Group {{ evobsd_internal_group }}
|
|
|
|
|
PasswordAuthentication no
|
|
|
|
|
insertafter: EOF
|
|
|
|
|
validate: '/usr/sbin/sshd -t -f %s'
|
|
|
|
|